PatchTheCVEdomainmod vulnerabilities and fixes
Recent CVEs affecting domainmod, with upgrade or downgrade steps. 3 tracked.
domainmod has 3 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 3. Most recent: 2024-10-15. Highest priority: CVE-2024-48622 (score 34/100).
- CVE-2024-48624 MEDIUM 5.3 UPGRADE In segments\edit.php of DomainMOD below v4.12.0, the segid parameter in the GET request can be exploited to ca
- CVE-2024-48623 MEDIUM 5.3 UPGRADE In queue\index.php of DomainMOD below v4.12.0, the list_id and domain_id parameters in the GET request can be
- CVE-2024-48622 MEDIUM 6.6 UPGRADE A cross-site scripting (XSS) issue in DomainMOD below v4.12.0 allows remote attackers to inject JavaScript cod
FAQ
How do I fix domainmod vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is domainmod being exploited right now?
None of the tracked domainmod CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which domainmod CVE should I patch first?
CVE-2024-48622 currently ranks highest (34/100): A cross-site scripting (XSS) issue in DomainMOD below v4.12.0 allows remote attackers to inject JavaScript cod.